SUSE-CU-2021:523-1: Recommended update of suse/sle15

Fri Nov 26 07:49:21 UTC 2021

SUSE Container Update Advisory: suse/sle15
-----------------------------------------------------------------
Container Advisory ID : SUSE-CU-2021:523-1
Container Tags        : suse/sle15:15.0 , suse/sle15:15.0.4.22.478
Container Release     : 4.22.478
Severity              : moderate
Type                  : recommended
References            : 1153687 1182372 1183268 1183589 1184326 1184399 1184997 1185325
                        1186447 1186503 1186602 1187153 1187224 1187273 1187425 1187466
                        1187738 1187760 1188156 1188435 1188623 1189031 1190059 1190199
                        1190356 1190465 1190712 1190815 1191286 1191324 1191370 1191609
                        1192337 1192436 
-----------------------------------------------------------------

The container suse/sle15 was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: SUSE-RU-2021:305-1
Released:    Thu Feb  4 15:00:37 2021
Summary:     Recommended update for libprotobuf
Type:        recommended
Severity:    moderate
References:  

libprotobuf was updated to fix:

- ship the libprotobuf-lite15 on the base products. (jsc#ECO-2911)

-----------------------------------------------------------------
Advisory ID: SUSE-RU-2021:3780-1
Released:    Tue Nov 23 23:48:27 2021
Summary:     Recommended update for libzypp, zypper, libsolv
Type:        recommended
Severity:    moderate
References:  1153687,1182372,1183268,1183589,1184326,1184399,1184997,1185325,1186447,1186503,1186602,1187224,1187425,1187466,1187738,1187760,1188156,1188435,1189031,1190059,1190199,1190356,1190465,1190712,1190815,1191286,1191324,1191370,1191609,1192337,1192436
This update for libzypp, zypper and libsolv fixes the following issues:

- Do not download full files even if the checkExistsOnly flag is set. (bsc#1190712)
- Fix kernel-*-livepatch removal in purge-kernels. (bsc#1190815)
- Make sure to keep states alives while transitioning. (bsc#1190199)
- May set techpreview variables for testing in /etc/zypp/zypp.conf.
- If environment variables are unhandy one may enable the desired techpreview in zypp.conf
- CMake/spec: Add option to force SINGLE_RPMTRANS as default for zypper.
- Make sure singleTrans is zypper-only for now.
- Do not check of signatures and keys two times(redundant) (bsc#1190059)
- Fix crashes in logging code when shutting down (bsc#1189031)
- Rephrase vendor conflict message in case 2 packages are involved (bsc#1187760)
- Fix solver jobs for PTFs (bsc#1186503)
- spec: switch to pkgconfig(openssl)
- Show key fpr from signature when signature check fails (bsc#1187224)
- Implement alternative single transaction commit strategy.
- Use ZYPP_MEDIANETWORK=1 to enable the experimental new media backend.
- Implement zchunk download, refactor Downloader backend.
- Fix purge-kernels fails (bsc#1187738)
- Avoid calling 'su' to detect a too restrictive sudo user umask (bsc#1186602)
- Fix typo in German translations.
- Support new reports for singletrans rpm commit.
- Prompt: choose exact match if prompt options are not prefix free (bsc#1188156)
- Install summary: Show new and removed packages closer to the prompt.
- Add need reboot/restart hint to XML install summary (bsc#1188435)
- Add comment option for lock command.
- Fix obs:// platform guessing for Leap (bsc#1187425)
- Manpage: Improve description about patch updates(bsc#1187466)
- Manpage: Recommend the needs-rebooting command to test whether a system reboot is suggested.
- Let a patch's reboot-needed flag overrule included packages. (bsc#1183268)
- Quickfix setting 'openSUSE_Tumbleweed' as default platform for 'MicroOS' (bsc#1153687)
- Protect against strict/relaxed user umask via sudo (bsc#1183589)
- zypper-log: protect against thread name indicators in a log.
- xml summary: add solvables repository alias. (bsc#1182372)
- Fix service detection with cgroupv2 (bsc#1184997)
- Fix purge-kernels is broken in Leap 15.3 (bsc#1185325)
- Allow trusted repos to add additional signing keys (bsc#1184326)
- Let negative values wait forever for the zypp lock (bsc#1184399)
- Link all executables with -pie (bsc#1186447)
- Ship an empty /etc/zypp/needreboot per default (jsc#PM-2645)
- choice rules: treat orphaned packages as newest (bc#1190465)
- Consolidate reboot-recommendations across tools and stop using /etc/zypp/needreboot (jsc#-SLE-18858)
- Disable logger in the child after fork (bsc#1192436)
- Check log writer before accessing it (bsc#1192337)
- Allow uname-r format in purge kernels keepspec
- zypper should keep cached files if transaction is aborted (bsc#1190356)
- Require a minimum number of mirrors for multicurl (bsc#1191609)
- Use procfs to detect nr of open fd's if rlimit is too high (bsc#1191324)
- Fix translations (bsc#1191370)
- RepoManager: Don't probe for plaindir repo if URL schema is plugin (bsc#1191286)

-----------------------------------------------------------------
Advisory ID: SUSE-RU-2021:3799-1
Released:    Wed Nov 24 18:07:54 2021
Summary:     Recommended update for gcc11
Type:        recommended
Severity:    moderate
References:  1187153,1187273,1188623
This update for gcc11 fixes the following issues:

The additional GNU compiler collection GCC 11 is provided:

To select these compilers install the packages:

- gcc11
- gcc-c++11
- and others with 11 prefix.

to select them for building:

- CC='gcc-11'
- CXX='g++-11'

The compiler baselibraries (libgcc_s1, libstdc++6 and others) are being replaced by the GCC 11 variants.

The following package changes have been done:

- libgcc_s1-11.2.1+git610-1.3.9 updated
- libprotobuf-lite15-3.5.0-5.2.1 added
- libsolv-tools-0.7.20-3.48.1 updated
- libstdc++6-11.2.1+git610-1.3.9 updated
- libzypp-17.28.8-3.78.1 updated
- zypper-1.14.50-3.60.1 updated